# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# curl https://amtrckr.info/json/name/androrat | jq '.[]' | jq '.url' | tr -d '"' | cut -d ':' -f 1 | sort | uniq | grep -vE '^[0-9.]*$' | grep -vE '^[^.]*\.[^.]*$'

1756mostacc.ddns.net
1987omid.ddns.net
5551520.no-ip.biz
726627.duckdns.org
aagaro.ddns.net
abinova.ddns.net
abs3nt.ddns.net
adelxxbx.no-ip.biz
adesja1337.no-ip.biz
aerror.no-ip.biz
ahag3ld1.ddns.net
alihoseini.no-ip.biz
alldebrid.duckdns.org
alpheron.duckdns.org
aminecity.ddns.net
amirhosein0074.ddns.net
anagliz.ddns.net
andqip.ddns.net
andro0161.no-ip.info
andro123.duckdns.org
android1385.ddns.net
androidbra.duckdns.org
android.no-ip.org
androidupdate.ddns.net
androjan.ddns.net
androkhan3100.ddns.net
androrat1226.ddns.net
androrat143.no-ip.biz
androrat1.no-ip.biz
androratbtas.no-ip.info
androrat.servegame.com
androratttt.no-ip.org
androratvirgin.duckdns.org
androrat.zapto.org
androtorma.ddns.net
anishmishra66.ddns.net
anonimousdre180.ddns.net
anonsa.ddns.net
anonvirus.ddns.net
anonymousip.ddns.net
apolo30.no-ip.org
arman.no-ip.biz
asadhashmi.ddns.net
asosha4ed.no-ip.biz
atin.ddns.net
atsizinoglu.duckdns.org
aymen1852.ddns.net
aymencossassi.ddns.net
bahoom.no-ip.biz
barish121.no-ip.org
behnamhack.ddns.net
bensphonetracker.ddns.net
berkani0774.no-ip.org
blackghostdc.duckdns.org
bmt96.noip.me
boinserver12.no-ip.info
c1.no-ip.biz
canaria.no-ip.info
charifo1310tok.no-ip.biz
comet.myftp.org
createmeon.zapto.org
cricbot.no-ip.info
crime.ddns.net
crisprueba.ddns.net
cyberandro.duckdns.org
dagohack.no-ip.me
dangerlove.no-ip.biz
danialdelta.ddns.net
danialmostafaei.no-ip.biz
daniele3814.ddns.net
darkshion.no-ip.org
dltelegram.ddns.net
dogecoinspeed.zapto.org
domeer-android.ddns.net
drdamar.hopto.org
droidjack228.ddns.net
drrazikhan.no-ip.info
duyguseliberkay.no-ip.biz
ehsanmaali3.ddns.net
ehsanmaali.ddns.net
elgen1.no-ip.biz
elvis2015.ddns.net
erikatersptra.ddns.net
esharj.ddns.net
fatiha29.ddns.net
fenon158.ddns.net
florian-pc.ksueyuj0mtxpt6gn.myfritz.net
forcehackinglove.ddns.net
fuck4you.ddns.net
gemini85.hopto.org
gentel901.no-ip.org
gert44.duckdns.org
ghanim2017.ddns.net
ghanou1603.no-ip.info
ghfx1.ddns.net
glaive24.no-ip.biz
gogaggg.ddns.net
goog2.no-ip.biz
goshasb.ddns.net
habbo.no-ip.org
habib1376.ddns.net
habib556.ddns.net
hachim07reg.no-ip.info
hackcam.zapto.org
hacker-321.no-ip.biz
hackme.no-ip.org
haiderhacer12.no-ip.biz
hamed1993.ddns.net
hamker.ddns.net
hash0r.no-ip.biz
hatam.no-ip.org
hazhar77.no-ip.biz
helloandroid.no-ip.org
hossam3030.ddns.net
ignoredhost.no-ip.biz
injectman.ddns.net
invisibleghost.no-ip.biz
iran0513.ddns.net
isamdonita.no-ip.org
jafarman.ddns.net
jNkey.ddns.net
johnharim004.ddns.net
juanblackhak.ddns.net
justarat.noip.me
kaliheh.no-ip.biz
kalinne.ddns.net
kalizinho.no-ip.org
kalljo.dvrdns.org
karasqlee9.no-ip.org
karenchik19.hopto.org
kaskw.zapto.org
kasofe123123aa.no-ip.biz
kontolanime.no-ip.biz
kuraist.zapto.org
kusleratnt.duckdns.org
lbossn.ddns.net
linonymousami.no-ip.org
liquidstone.ddns.net
locolocoloco.ddns.net
losever2.no-ip.biz
loveubaby.3utilities.com
makarand.no-ip.org
marcsil.ddns.net
martin123456.no-ip.org
masafat.ddns.net
matgio.duckdns.org
matin.ddns.net
mayyaha.no-ip.info
mazxor.zapto.org
mehtab123.ddns.net
mghorbani78.ddns.net
mikaniki.ddns.net
mikestar.no-ip.biz
miltin2.no-ip.org
misty255.no-ip.org
mjhooollltuuu.no-ip.biz
mmdjj212.myftp.biz
moein1369.no-ip.biz
moha55.no-ip.biz
mohamed11.ddns.net
mohammad2002.no-ip.biz
mohammadhk.ddns.net
mohammedwasib.ddns.net
mohsenfaz.ddns.net
moosio.no-ip.biz
mrblacklife.ddns.net
mrclone97.ddns.net
mrkriper3331.zapto.org
mrm2.ddns.net
msficecream.ddns.net
msn79.ddns.net
mster0102.no-ip.biz
msupdate.myvnc.com
murryapplicazione.no-ip.org
mwanika.no-ip.biz
myhost123.myftp.biz
myonline.no-ip.biz
nassahsliman.ddns.net
newxor2.no-ip.org
nexmopro830.ddns.net
nulldoesnotexist.duckdns.org
persir.no-ip.biz
photoeditor.ddns.net
pruebasernesto.ddns.net
qwerty1212.ddns.net
r00t.myftp.biz
r3cxw.ddns.net
rafkin85.ddns.net
rahimtrx.hopto.org
rarwindow.no-ip.biz
recycled.no-ip.org
redckard.ddns.net
redcode.ddns.net
replace.duckdns.org
rumpelztinzkin.sytes.net
rustyash.no-ip.biz
s3b4s.noip.me
s3rv3randr0id.no-ip.biz
sabbah.duckdns.org
saiber-far68.ddns.net
sajadianh.ddns.net
salarkalat.ddns.net
samersamerz.no-ip.biz
samy777.no-ip.biz
securepurpose.no-ip.info
securitytestt.ddns.net
servidor23.ddns.net
sesizkal32.no-ip.biz
setts.no-ip.org
shahabhacker.ddns.net
shakaky.ddns.net
sherlockholmes.duckdns.org
shosh.ddns.net
simbabweratte.hopto.org
skipy.ddns.net
slavikkalinovskiy.ddns.net
sonkar412.duckdns.org
sramic.ddns.net
suckmordecock.duckdns.org
svn-01.ddns.net
takpar67.no-ip.biz
telegram-stickers.noip.me
telegram-tools.no-ip.biz
testan.ddns.net
thekillers.ddns.net
thelostan.ddns.net
tom928.no-ip.biz
toyman6699.no-ip.info
updatexxx.hopto.org
usa20002015.ddns.net
uzzal619.viewdns.net
vikas.no-ip.biz
vipmustafa.no-ip.info
volnado.sytes.net
vpn0.ddns.net
war10ck.serveftp.com
webi7.ddns.info
whatsradar.no-ip.biz
xyz2145.ddns.net
zadehasan1.ddns.net
zaheerkhan786.ddns.net
zal75zk.ddns.net
zaqatala.dynu.com
zola123.no-ip.biz
zongkahani.no-ip.biz

# Reference: https://twitter.com/malwrhunterteam/status/1252907606043222016
# Reference: https://www.virustotal.com/gui/file/d723869a8f5ffdc9c60539b5358ba9d284e22ee0e5007410f5844946871744c9/detection

173.249.50.34:12182

# Reference: https://www.virustotal.com/gui/file/a067b671ceb08e293a535072100d165b1f25935905624c7ab3302736c09d2156/detection

37.43.70.221:1337
zxxaq1231123.ddns.net
